Search

Expected end of text, found '.' (at char 13), (line:1, col:14)
Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Search Examples

CVEs in KEV CVEs with EPSS >= 80% Crit. Microsoft High Apache SQL Injection (CWE-89) Linux Kernel High (CVSS 3.1) Apache Struts RCE (Remote Code Execution) XSS (CWE-79) Critical (CVSS 4.0) CVEs to check

Search Results (347701 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-15785 1 Fontforge 1 Fontforge 2024-11-21 N/A
FontForge 20190813 through 20190820 has a buffer overflow in PrefsUI_LoadPrefs in prefs.c.
CVE-2019-15784 1 Srtalliance 1 Secure Reliable Transport 2024-11-21 N/A
Secure Reliable Transport (SRT) through 1.3.4 has a CSndUList array overflow if there are many SRT connections.
CVE-2019-15783 1 Lute-tab Project 1 Lute-tab 2024-11-21 N/A
Lute-Tab before 2019-08-23 has a buffer overflow in pdf_print.cc.
CVE-2019-15782 1 Webtorrent 1 Webtorrent 2024-11-21 N/A
WebTorrent before 0.107.6 allows XSS in the HTTP server via a title or file name.
CVE-2019-15781 1 Weblizar 1 Social Likebox \& Feed 2024-11-21 N/A
The facebook-by-weblizar plugin before 2.8.5 for WordPress has CSRF.
CVE-2019-15780 1 Strategy11 1 Formidable Form Builder 2024-11-21 9.8 Critical
The formidable plugin before 4.02.01 for WordPress has unsafe deserialization.
CVE-2019-15779 1 Quadlayers 1 Wp Social Feed Gallery 2024-11-21 N/A
The insta-gallery plugin before 2.4.8 for WordPress has no nonce validation for qligg_dismiss_notice or qligg_form_item_delete.
CVE-2019-15778 1 Getwooplugins 1 Additional Variation Images For Woocommerce 2024-11-21 N/A
The woo-variation-gallery plugin before 1.1.29 for WordPress has XSS.
CVE-2019-15777 1 Shapepress 1 Wp Dsgvo Tools 2024-11-21 N/A
The shapepress-dsgvo plugin before 2.2.19 for WordPress has wp-admin/admin-ajax.php?action=admin-common-settings&admin_email= XSS.
CVE-2019-15776 1 Webcraftic 1 Simple 301 Redirects-addon-bulk Uploader 2024-11-21 N/A
The simple-301-redirects-addon-bulk-uploader plugin before 1.2.5 for WordPress has no protection against 301 redirect rule injection via a CSV file.
CVE-2019-15775 1 Learning Courses Project 1 Learning Courses 2024-11-21 N/A
The nd-learning plugin before 4.8 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVE-2019-15774 1 Booking Project 1 Booking 2024-11-21 N/A
The nd-booking plugin before 2.5 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVE-2019-15773 1 Travel Management Project 1 Travel Management 2024-11-21 N/A
The nd-travel plugin before 1.7 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVE-2019-15772 1 Donations Project 1 Donations 2024-11-21 N/A
The nd-donations plugin before 1.4 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVE-2019-15771 1 Components For Wp Bakery Page Builder Project 1 Components For Wp Bakery Page Builder 2024-11-21 N/A
The nd-shortcodes plugin before 6.0 for WordPress has a nopriv_ AJAX action that allows modification of the siteurl setting.
CVE-2019-15770 1 Hallme 1 Woocommerce Address Book 2024-11-21 N/A
The woo-address-book plugin before 1.6.0 for WordPress has save calls without nonce verification checks.
CVE-2019-15769 1 Haktansuren 1 Handl Utm Grabber 2024-11-21 N/A
The handl-utm-grabber plugin before 2.6.5 for WordPress has CSRF via add_option and update_option.
CVE-2019-15767 1 Gnu 1 Chess 2024-11-21 N/A
In GNU Chess 6.2.5, there is a stack-based buffer overflow in the cmd_load function in frontend/cmd.cc via a crafted chess position in an EPD file.
CVE-2019-15766 1 Kslabs 1 Ksweb 2024-11-21 8.8 High
The KSLABS KSWEB (aka ru.kslabs.ksweb) application 3.93 for Android allows authenticated remote code execution via a POST request to the AJAX handler with the configFile parameter set to the arbitrary file to be written to (and the config_text parameter set to the content of the file to be created). This can be a PHP file that is written to in the public web directory and subsequently executed. The attacker must have network connectivity to the PHP server that is running on the Android device.
CVE-2019-15759 1 Webassembly 1 Binaryen 2024-11-21 6.5 Medium
An issue was discovered in Binaryen 1.38.32. Two visitors in ir/ExpressionManipulator.cpp can lead to a NULL pointer dereference in wasm::LocalSet::finalize in wasm/wasm.cpp. A crafted input can cause segmentation faults, leading to denial-of-service, as demonstrated by wasm2js.